JavaScript_Noop_Sled

Synopsis

Description

The definition detects NOOP (no operation) sleds in JavaScript. NOOP sleds are used as part of buffer overflow attacks and are commonly observed in client-side attacks.

False Positives

This definition may generate a false positive on sites that use escaped characters to represents non-ASCII characters. This type of false positive is fairly rare though since this definition only triggers if two or more NOOPs are observed.